KagazoIndia PKI Verify
7 min readTax & Financial

Complete Guide to Verifying Form 16, e-PAN Card & Income Tax PDF Digital Signatures

Last updated: 12 September 20262,847 reads

Step-by-step tutorial on verifying digital signatures on TRACES Form 16, NSDL/UTIITSL e-PAN cards, and Income Tax assessment orders for home loans, visa processing, and tax compliance.

Complete Guide to Verifying Form 16, e-PAN Card & Income Tax PDF Digital Signatures

Verify Your Government PDF Instantly

Check digital signatures on Aadhaar, Community, and Marksheets in 2 seconds.

Verify PDF Free

Complete Guide to Verifying Form 16, e-PAN Card & Income Tax PDF Digital Signatures

In corporate and individual financial operations in India, electronic PDF documents are the standard proof of income and identity. Whether you are applying for a home loan with SBI or HDFC, submitting your documents to VFS Global for a Schengen or US visa, or completing annual audits, three documents are indispensable:

  1. Form 16 (Part A & Part B): Downloaded from the Income Tax Department's TRACES portal.
  2. e-PAN Card: Issued digitally by Protean (formerly NSDL e-Gov) or UTIITSL.
  3. Income Tax Return (ITR-V) & Intimation Orders: Issued under Section 143(1) of the Income Tax Act.

Each of these documents is authenticated not with a handwritten signature, but with a high-assurance Class 2 or Class 3 Digital Signature Certificate (DSC).

Yet, when financial underwriters, visa officers, or legal auditors open these PDFs, they are routinely greeted by the infamous yellow question mark:

"Signature validity is unknown. Not certified by a trusted certificate authority."

In this guide, we analyze the cryptographic standards used in Indian financial documentation and show you how to guarantee green-tick verification for any bank or embassy submission.


Why Banks and Foreign Embassies Reject Unverified Financial PDFs

When applying for credit facilities (mortgages, personal loans, business overdrafts) or foreign travel visas:

  • Loan Underwriting Systems: Top private and nationalized banks use automated document management suites. An unvalidated signature trips fraud prevention algorithms, triggering manual underwriter re-checks that delay loan sanctions by days or weeks.
  • Visa Consulates (US, UK, Schengen, Canada): Consular verification guidelines require unadulterated tax proofs. Visa officers receiving an electronic Form 16 with a "Validity Unknown" notice may suspect altered gross salary figures or fabricated tax withholdings, leading to unexpected visa rejections under public charge or authenticity rules.

Cryptographic Structure of Indian Tax Documents

Indian tax and revenue documents are signed under strict protocols mandated by the Central Board of Direct Taxes (CBDT) and the Controller of Certifying Authorities (CCA):

┌──────────────────────────────────────────────────────────────────┐
│                   GOVERNMENT OF INDIA                            │
│                 INCOME TAX DEPARTMENT                            │
│        FORM NO. 16 [See rule 31(1)(a)] - Certificate of TDS     │
├──────────────────────────────────────────────────────────────────┤
│ Employer PAN / TAN: CHEN01234F / CHEC09876E                      │
│ Employee PAN:       ABCDE1234F                                   │
│ Assessment Year:    2025-26                                      │
├──────────────────────────────────────────────────────────────────┤
│                                                                  │
│  ┌────────────────────────────────────────────────────────────┐  │
│  │                     DIGITALLY SIGNED BY                    │  │
│  │  Signer Name:     RAMESH SRINIVASAN                        │  │
│  │  Designation:     Authorised Signatory / Finance Director  │  │
│  │  CA Issuer:       eMudhra Class 3 Individual Sub-CA        │  │
│  │  Signing Time:    2025:06:14 18:24:10 +05'30'              │  │
│  │  Status:          VALID (Zero alterations in ByteRange)    │  │
│  └────────────────────────────────────────────────────────────┘  │
└──────────────────────────────────────────────────────────────────┘

Form 16 (TRACES Portal)

  • Part A: Generated directly from TRACES (tdscpc.gov.in). Contains TDS deducted and deposited with the central government. Signed either by the Income Tax Department's automated token or the employer's designated director using a Class 3 DSC.
  • Part B: Prepared by the employer detailing salary breakdown, Section 80C/80D deductions, and tax calculations. Signed by the employer's payroll officer.

e-PAN Card (Protean / UTIITSL)

  • Contains an electronic replica of your Permanent Account Number card.
  • Digitally signed by Protean eGov Technologies Limited or UTI Infrastructure Technology And Services Limited using an enterprise SHA-256 certificate anchored to RCAI Root.
  • Password protected: Your 8-digit date of birth in DDMMYYYY format.

Step-by-Step Guide: Verifying Form 16 and e-PAN Signatures

Step 1: Gather Your Original PDF Files

Obtain the authentic electronic PDF from your employer's HRMS portal (for Form 16) or the download link from Protean / UTIITSL (for e-PAN).

Step 2: Upload to Kagazo Verification Portal

  1. Navigate to Kagazo Home.
  2. Drag and drop your Form 16 or e-PAN file into the upload zone.
  3. If checking an e-PAN, input your 8-digit birth date password (e.g., 15081995).
  4. Click Verify Digital Signature.

Step 3: Automated Cryptographic Audit

Kagazo performs a comprehensive 4-point check:

  1. Hash Verification: Audits the PDF's /ByteRange to confirm no salary numbers or deductions were altered after signing.
  2. CA Root Chain: Maps intermediate CAs (eMudhra, Capricorn, NIC, (n)Code, Sify) to the Root Certifying Authority of India.
  3. CRL & OCSP Revocation Status: Confirms the signing certificate was active and untainted on the date of signing.
  4. LTV Embedding: Embeds a Document Security Store dictionary with all certificate chains.

Step 4: Download Your Bank-Ready PDF

Save the verified PDF. When you forward this document to your bank loan manager or visa immigration agent, their PDF viewer will display the validated green tick with the message: "Signature is VALID, signed by authorized signatory."


Tax Documents & Certifying Authorities Breakdown

Document TypeSource PortalCommon Certificate IssuersStandard Password Format
Form 16 Part ATRACES (tdscpc.gov.in)eMudhra, Capricorn, Sify Class 3Unprotected
Form 16 Part BCorporate Payroll / HRMSEmployer Class 2 / 3 DSCUnprotected or Employee ID
Protean e-PANonlineservices.nsdl.comProtean eGov Technologies CADOB: DDMMYYYY
UTIITSL e-PANpan.utiitsl.comUTIITSL Document SignerDOB: DDMMYYYY
ITR-V Ackeportal.incometax.gov.inIncome Tax CPC BengaluruPAN (lowercase) + DOB (DDMMYYYY)
Form 26ASTRACESCPC-TDS Central SignerUnprotected

What If the Signer's Certificate Has Expired?

This is one of the most common questions raised by taxpayers:

"My employer signed my Form 16 in June 2023. Today, their digital signature token has expired. Does this make my Form 16 invalid?"

The short answer: No, absolutely not.

Under the international PAdES (PDF Advanced Electronic Signatures) standard and Indian law, a digital signature remains permanently valid if it was signed while the certificate was active, provided an authentic timestamp was embedded.

Without Long-Term Validation (LTV), however, modern PDF viewers attempt to validate the expired certificate against current time and fail. Kagazo solves this by freezing and sealing the historical validation path in the /DSS dictionary, guaranteeing that past tax documents remain valid for 20+ years.


Frequently Asked Questions (FAQ)

Q1: Can I verify multiple Form 16 parts together?

Yes. Form 16 Part A and Part B are frequently separate files. You can upload each part individually to Kagazo to verify and stamp each document for loan applications.

Q2: Does Kagazo see my salary details or PAN number?

No. Kagazo is designed with strict data privacy protocols. The verification runs in isolated memory environments without logging your financial numbers, employer details, or salary data to persistent storage.

Q3: Why did my bank loan officer say my e-PAN signature is "Not Verified"?

Most bank branch staff open PDF documents in standard web browsers (like Chrome or Edge) rather than professional Adobe Acrobat configurations. Web browsers do not have built-in Indian PKI trust stores. Passing your e-PAN through Kagazo embeds universal LTV metadata so that any browser or viewer recognizes the green tick.


Ensure Smooth Loan & Visa Processing Today

Avoid costly loan processing delays or visa application rejections caused by unverified PDF signatures.

Verify your Form 16 and e-PAN signatures on Kagazo now — fast, free, and secure.

K

Kagazo Tax & Compliance Desk

Verified Author

Kagazo Team — Experts in Indian government document verification and exam preparation tools.

About Kagazo